$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24419cef-8cc6-3a0a-9a9c-6296d0bda5dc.roa File: 24419cef-8cc6-3a0a-9a9c-6296d0bda5dc.roa (raw, json) Hash identifier: DMLXyYXj/1xg/SAQcrg/gsiMoabSxCee9Qm05xbys6I= Subject key identifier: 59:28:7E:5C:31:16:48:8C:DD:3C:71:51:91:8C:35:84:E5:7F:30:F3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D6AAAAA521A852D8697A7A180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24419cef-8cc6-3a0a-9a9c-6296d0bda5dc.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 8069 IP address blocks: 20.153.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:aa:52:1a:85:2d:86:97:a7:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=578f3ed3-96ad-43c8-9720-689e650bcf37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:47:22:d0:4f:c4:25:3a:64:4a:cd:a5:12:ff: f1:9e:1d:67:cf:28:2e:74:89:88:f9:ad:8b:4e:a3: a4:1d:ca:73:a3:4e:53:69:d5:37:e3:0e:74:59:d1: b9:44:24:5e:fe:b3:0d:8f:75:a2:2e:6c:95:f5:8a: c6:27:2d:9f:a3:6c:fc:b8:21:40:67:9c:0f:48:54: 42:e9:aa:e0:42:95:9e:53:f9:68:9c:83:cd:f7:02: 66:c5:24:8b:27:87:77:14:9f:ce:1b:be:3a:85:7b: e9:0c:a5:5d:54:51:f3:a8:ab:7e:d5:c0:08:13:59: fc:ff:81:42:4b:3e:fe:58:9f:0f:56:d7:ab:a4:fe: 91:c4:4c:b2:52:65:6e:d5:21:bb:ba:10:ee:b8:1a: b7:6b:d3:ff:47:37:a6:b0:33:58:68:42:76:ce:b4: 2d:0b:70:fb:b8:d5:b5:10:e9:26:85:47:d5:17:b8: 53:7e:6d:a8:bd:d4:a1:0d:6b:5f:c4:c8:9a:bc:c9: b3:91:64:96:e0:34:0d:b9:c4:76:ed:43:64:16:f7: bd:76:45:d7:4d:9b:93:34:44:8a:06:36:58:34:69: eb:9d:57:1c:dd:00:a6:33:14:cd:82:a8:e2:bc:80: 3c:be:87:a5:86:69:d3:17:58:43:ef:3c:c6:54:cf: f7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:28:7E:5C:31:16:48:8C:DD:3C:71:51:91:8C:35:84:E5:7F:30:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24419cef-8cc6-3a0a-9a9c-6296d0bda5dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b9:60:f5:30:1a:c4:95:c7:a0:6a:cf:51:7c:be:0a:ac:cd: 93:63:60:ac:b8:fb:c8:68:fd:2a:1b:5e:63:93:94:4b:98:89: e6:2c:06:bb:1f:e0:b1:69:e5:c1:61:5b:9e:7a:63:e7:cc:5e: cc:e3:81:bb:d7:48:37:31:d3:0f:71:f0:ed:02:69:b7:ea:07: cf:e8:19:f1:f6:51:73:c1:da:4e:59:cc:d7:66:37:03:10:a2: 29:0a:10:59:35:95:22:98:f3:11:c5:10:5d:58:c3:e9:b7:51: 85:6d:ac:d3:00:3f:69:b0:4d:eb:fa:35:6b:f6:8e:ba:0f:23: 07:bb:8c:1c:fa:d1:7b:c7:60:19:20:e0:05:4d:66:89:db:1e: a5:78:ed:21:55:96:8a:52:99:1e:69:ff:31:b3:c8:09:30:c2: 82:cb:51:62:6c:54:62:65:ab:73:d0:21:ac:e6:95:1c:ba:83: a9:95:c8:9e:a5:d4:d7:1f:6b:0c:44:aa:01:02:e7:bb:22:e3: b6:c7:74:82:df:71:39:83:ec:25:5c:35:24:e9:ef:46:e9:48: 10:45:a4:ab:3d:13:ed:5f:bd:38:1f:f7:54:85:5e:b8:e9:f6: 11:7d:1a:bb:07:3f:84:4f:7c:9a:2c:fb:ed:68:6c:f4:24:1b: 2b:b5:22:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqqpSGoUthpenoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk NTc4ZjNlZDMtOTZhZC00M2M4LTk3MjAtNjg5ZTY1MGJjZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkci0E/EJTpkSs2lEv/xnh1nzygudImI+a2L TqOkHcpzo05TadU34w50WdG5RCRe/rMNj3WiLmyV9YrGJy2fo2z8uCFAZ5wPSFRC 6argQpWeU/lonIPN9wJmxSSLJ4d3FJ/OG746hXvpDKVdVFHzqKt+1cAIE1n8/4FC Sz7+WJ8PVterpP6RxEyyUmVu1SG7uhDuuBq3a9P/RzemsDNYaEJ2zrQtC3D7uNW1 EOkmhUfVF7hTfm2ovdShDWtfxMiavMmzkWSW4DQNucR27UNkFve9dkXXTZuTNESK BjZYNGnrnVcc3QCmMxTNgqjivIA8voelhmnTF1hD7zzGVM/3JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkoflwxFkiM3TxxUZGMNYTlfzDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjQ0MTljZWYtOGNjNi0z YTBhLTlhOWMtNjI5NmQwYmRhNWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm5YPUwGsSVx6Bqz1F8vgqszZNjYKy4+8ho/SobXmOTlEuYieYsBrsf 4LFp5cFhW556Y+fMXszjgbvXSDcx0w9x8O0CabfqB8/oGfH2UXPB2k5ZzNdmNwMQ oikKEFk1lSKY8xHFEF1Yw+m3UYVtrNMAP2mwTev6NWv2jroPIwe7jBz60XvHYBkg 4AVNZonbHqV47SFVlopSmR5p/zGzyAkwwoLLUWJsVGJlq3PQIazmlRy6g6mVyJ6l 1NcfawxEqgEC57si47bHdILfcTmD7CVcNSTp70bpSBBFpKs9E+1fvTgf91SFXrjp 9hF9GrsHP4RPfJos++1obPQkGyu1IrQ= -----END CERTIFICATE-----Generated at Fri Apr 17 21:19:15 2026 by rpki-client